close
The Wayback Machine - https://web.archive.org/web/20061107041512/http://news.teamxbox.com:80/xbox/12033/IE7-Final-Released-Vulnerability-Already-Discovered/
BERJAYA
BERJAYA

IE7 Final Released, Vulnerability Already Discovered

Oct. 19th, 2006 5:13 am
Microsoft has released to the public the final version of Internet Explorer 7 for Windows XP at http://www.microsoft.com/ie. Microsoft will also begin distributing Internet Explorer 7 as a high-priority update via Automatic Updates in November 2006.

Less than 24 hours after IE7 has been available for public download, security research company Secunia has already discovered a flaw in the new browser:

The vulnerability is caused due to an error in the handling of redirections for URLs with the "mhtml:" URI handler. This can be exploited to access documents served from another web site.

Secunia has constructed a test, which is available at: http://secunia.com/Internet_Explorer_Arbitrary_Content_Disclosure_Vulnerability_Test/

Secunia has confirmed the vulnerability on a fully patched system with Internet Explorer 7.0 and Microsoft Windows XP SP2. Other versions may also be affected.


Will you use Firefox 2 or Internet Explorer 7? Tell us in the comments section:
More Xbox News